24725 matches found
GHSA-52RF-25HQ-5M33
creationtimestamp| type| source ---|---|--- 2025-02-11 21:52:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113987467563948370 2025-02-11 23:11:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3935...
GHSA-W98M-J6HQ-CWJM
creationtimestamp| type| source ---|---|--- 2025-02-11 15:40:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113986005569037253...
CVE-2025-24811
creationtimestamp| type| source ---|---|--- 2025-02-11 11:09:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113984941120195910 2025-02-11 11:16:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvju3nrrt2i 2025-02-11 12:32:31+00:00| seen|...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for the event log to avoid corruption. The TPM event log table is a Linux-specific construct. The data produced by the GetEventLog boot service is cached in memory and then passed to the OS...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Fix for out-of-bound access when a valid event group is used. The perf tool allows users to create event groups using the cmd 1, but the driver does not check whether the array index is out of bounds whe...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fixed the issue where sclpinit fails and does not clean up properly. If sclpinit fails, it only partially cleans up resources. If there are multiple failed calls to sclpinit, sclpstatechangeevent will be added multiple...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: MIPS: cevt-r4k – Do not call getc0compareint if the timer irq is installed. This prevents a warning: 0.118053 BUG: A sleeping function was called from an invalid context at kernel/locking/mutex.c:283. The issue was caused by the...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed a UAF Use-after-Allocation issue by correcting mismatching between the bpfprog/attachment and tasks-trace-RCU flavors. Uprobes always use bpfprogrunarrayuprobe under tasks-trace-RCU protection. However, it is possible ...
Astra Linux – Vulnerability in python-tornado
Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in th...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core from accessing an invalid event buffer address This commit addresses a issue where the USB core might access an invalid event buffer address during runtime suspension, potentially causing SMMU...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Tracing: Build event generation tests are now performed only as modules. The kprobes and synth event generation test modules add events and lock them get a reference to those event files in the module initialization function, and...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisipcie: Fixed out-of-bound access when a valid event group is used. The perf tool allows users to create event groups using the cmd 1. However, the driver does not check whether the array index is out of bounds wh...
CVE-2025-1180
creationtimestamp| type| source ---|---|--- 2025-02-11 07:34:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113984096811446641 2025-02-11 11:29:58+00:00| seen| https://t.me/cvedetector/17680 2025-02-11 12:19:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhvnfvopgu2...
CVE-2024-3449
creationtimestamp| type| source ---|---|--- 2025-02-11 02:18:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulsqqw4a22...
PT-2025-6264 · Fortinet · Fortianalyzer
Name of the Vulnerable Software and Affected Versions: Fortinet FortiAnalyzer versions 6.4.0 through 7.6.0 Description: The issue allows an unauthorized actor to cause information disclosure via filter manipulation, potentially leading to the exposure of sensitive information. This is related to...
Insertion of sensitive information into Event log
...
This Week in Spring - February 11th, 2025
Hi, Spring fans! It's almost Valentine's day, and let me just say: I love the Spring community! It's such an exciting and interesting place to be. Thank you everyone for all that you do. I'm busy preparing for ConFoo, in Montreal, Canada, and for Devnexus, in Atlanta, Georgia. If you're around be...
GHSA-PW7M-P9Q7-357P
creationtimestamp| type| source ---|---|--- 2025-02-10 22:15:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113981896093771933...
CVE-2024-46429
creationtimestamp| type| source ---|---|--- 2025-02-10 18:54:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113981105527920026 2025-02-10 18:58:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113981122747611903 2025-02-10 19:16:10+00:00| seen|...